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CLAIMS 

What is claimed is; 

1. A method for use in a computer capable of supporting multiple 
authentication mechanisms, the method comprising: 

generating at least one indicator associated with and identifying at least one 
authentication mechanism; and 

controlling access to at least one resource based on the indicator. 

2. The method as recited in Claim 1, wherein generating the indicator 
further includes receiving inputs, providing the inputs to the authentication 
mechanism, and causing the authentication mechanism to generate at least one 
security identifier (SID) that identifies the authentication mechanism. 

3. The method as recited in Claim 1, wherein generating the indicator 
further includes identifying within the indicator at least one characteristic 
associated with the authentication mechanism. 

4. The method as recited in Claim 3, wherein the at least one 
characteristic associated with the authentication mechanism includes a measure of 
strength of the authentication mechanism. 

5. The method as recited in Claim 4, wherein the measure of strength 
of the authentication mechanism identifies a length of an encryption key employed 
by the authentication mechanism. 
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6. The method as recited in Claim 1, wherein controUing access to the 
resource based on the indicator further includes comparing the indicator to at least 
one access control list having at least one access control entry therein. 

7. The method as recited in Claim 6, wherein if the access control entry 
operatively specifies that the at least one authentication mechanism is permitted to 
access the resource, then access to the at least one resource is allowed to proceed. 

8. The method as recited in Claim 6, wherein if the access control entry 
operatively specifies that the at least one authentication mechanism is not 
permitted to access the resource, then access to the at least one resource is not 



12 allowed to proceed. 
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9. The method as recited in Claim 6, wherein if the access control entry 
does not operatively specify that the at least one authentication mechanism is 

16 permitted to access the resource, then access to the at least one resource is not 

17 allowed to proceed. 

18 

19 10. The method as recited in Claim 1, wherein the indicator includes a 

20 security token. 
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11. A computer-readable medium for use in a device capable of 
supporting multiple authentication mechanisms, the computer-readable medium 
having computer- executable instructions for performing acts comprising: 
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producing at least one indicator that uniquely identifies at least one 
authentication mechanism supported by the device; and 

causing the device to selectively control access to at least one resource 
operatively coupled to the device based at least in part on the indicator. 

12. The computer-readable medium as recited in Claim 11, wherein 
producing the indicator further includes receiving inputs, providing the inputs to 
the authentication mechanism, and causing the authentication mechanism to 
generate at least one security identifier (SID) that identifies the authentication 
mechanism, in response thereto. 

13. The computer-readable medium as recited in Claim 11, wherein 
producing the indicator further includes identifying within the indicator at least 
one characteristic of the authentication mechanism. 

14. The computer-readable medium as recited in Claim 13, wherein the 
at least one characteristic of the authentication mechanism includes a strength 
characteristic of the authentication mechanism. 

15. The computer-readable medium as recited in Claim 14, wherein the 
strength characteristic identifies a length of an encryption key employed by the 
authentication mechanism. 

16. The computer-readable medium as recited in Claim 11, wherein 
causing the device to selectively control access to the at least one resource based 
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on the indicator further includes causing the device to compare the indicator to 
control data . 

17. The computer-readable medium as recited in Claim 16, wherein if 
the control data specifies that the authentication mechanism is permitted to access 
the resource, to which subsequent access to the resource is allowed, 

18. The computer-readable medium as recited in Claim 16, wherein if 
the control data operatively specifies that the authentication mechanism is not 
permitted to access the resource, to which subsequent access to the resource is 
prohibited. 

19. The computer-readable medium as recited in Claim 16, wherein if 
the control data does not operatively specify that the authentication mechanism is 
permitted to access the resource, to which subsequent access to the resource is 
prohibited. 

20. The computer-readable medium as recited in Claim 10; wherein the 
indicator includes a security token. 

21. An apparatus comprising : 

at least one authentication mechanism configured to generate at least one 
indicator that identifies the authentication mechanism; 
an access control list; 

at least one access controlled resource; and 
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logic operatively configured to compare the indicator with the access 
control list and selectively control access to the resource based on the indicator . 

22. The apparatus as recited in Claim 21, wherein the authentication 
mechanism is further configured to receive user inputs and generate at least one 
security identifier (SID) that identifies the authentication mechanism based on the 
user inputs. 

23. The apparatus as recited in Claim 21, wherein the indicator further 
includes at least one identifying characteristic associated with the authentication 
mechanism. 

24. The apparatus as recited in Claim 23, wherein the at least one 
identifying characteristic associated with the authentication mechanism indicates a 
measure of strength of the authentication mechanism 

25. The apparatus as recited in Claim 24, wherein the measure of 
strength of the authentication mechanism identifies a length of an encryption key 
employed by the authentication mechanism. 

26. The apparatus as recited in Claim 23, wherein the indicator includes 
a security token. 
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